Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 10.0.4
Report Generated On: Sat, 14 Sep 2024 17:54:58 GMT
Dependencies Scanned: 22 (17 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2024-09-14T17:52:06Z
NVD API Last Modified: 2024-09-14T16:17:33Z

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
accessors-smart-2.5.1.jar		pkg:maven/net.minidev/accessors-smart@2.5.1		41
angus-activation-2.0.2.jar		pkg:maven/org.eclipse.angus/angus-activation@2.0.2		35
asm-9.7.jar		pkg:maven/org.ow2.asm/asm@9.7		54
error_prone_annotations-2.32.0.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.32.0		29
j2objc-annotations-3.0.0.jar		pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0		33
jakarta.activation-api-2.1.3.jar		pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3		45
json-path-2.9.0.jar	cpe:2.3:a:json-path:jayway_jsonpath:2.9.0:::::::*	pkg:maven/com.jayway.jsonpath/json-path@2.9.0	Highest	34
json-smart-2.5.1.jar	cpe:2.3:a:json-smart_project:json-smart:2.5.1:::::::* cpe:2.3:a:json-smart_project:json-smart-v2:2.5.1:::::::*	pkg:maven/net.minidev/json-smart@2.5.1	Highest	51
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
micrometer-commons-1.12.10.jar		pkg:maven/io.micrometer/micrometer-commons@1.12.10		65
micrometer-observation-1.12.10.jar		pkg:maven/io.micrometer/micrometer-observation@1.12.10		65
slf4j-api-2.0.16.jar		pkg:maven/org.slf4j/slf4j-api@2.0.16		29
spotbugs-annotations-4.8.6.jar		pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6		53
spring-core-6.1.13.jar	cpe:2.3:a:pivotal_software:spring_framework:6.1.13:::::::* cpe:2.3:a:springsource:spring_framework:6.1.13:::::::* cpe:2.3:a:vmware:spring_framework:6.1.13:::::::*	pkg:maven/org.springframework/spring-core@6.1.13	Highest	41
spring-hateoas-2.3.3.jar	cpe:2.3:a:vmware:spring_hateoas:2.3.3:::::::*	pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3	Highest	46
spring-plugin-core-3.0.0.jar		pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0		42
spring-web-6.1.13.jar	cpe:2.3:a:pivotal_software:spring_framework:6.1.13:::::::* cpe:2.3:a:springsource:spring_framework:6.1.13:::::::* cpe:2.3:a:vmware:spring_framework:6.1.13:::::::* cpe:2.3:a:web_project:web:6.1.13:::::::*	pkg:maven/org.springframework/spring-web@6.1.13	Highest	35

Dependencies (vulnerable)

accessors-smart-2.5.1.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/minidev/accessors-smart/2.5.1/accessors-smart-2.5.1.jar
MD5: 51e60dbf9ac51f6666f0077317990944
SHA1: 19b820261eb2e7de7d5bde11d1c06e4501dd7e5f
SHA256:2796ae857d0c7be4bc3580daa4d3828d555212355f4c83d38dd0af0742b3c812
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/net.minidev/json-smart@2.5.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	accessors-smart	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Vendor	pom	artifactid	accessors-smart	Highest
Vendor	pom	artifactid	accessors-smart	Low
Vendor	pom	developer email	shoothzj@gmail.com	Low
Vendor	pom	developer email	uchemouni@gmail.com	Low
Vendor	pom	developer id	shoothzj	Medium
Vendor	pom	developer id	uriel	Medium
Vendor	pom	developer name	Uriel Chemouni	Medium
Vendor	pom	developer name	ZhangJian He	Medium
Vendor	pom	groupid	net.minidev	Highest
Vendor	pom	name	ASM based accessors helper used by json-smart	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	pom	url	https://urielch.github.io/	Highest
Product	file	name	accessors-smart	High
Product	jar	package name	asm	Highest
Product	jar	package name	minidev	Highest
Product	jar	package name	net	Highest
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	Manifest	Bundle-Name	accessors-smart	Medium
Product	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Product	pom	artifactid	accessors-smart	Highest
Product	pom	developer email	shoothzj@gmail.com	Low
Product	pom	developer email	uchemouni@gmail.com	Low
Product	pom	developer id	shoothzj	Low
Product	pom	developer id	uriel	Low
Product	pom	developer name	Uriel Chemouni	Low
Product	pom	developer name	ZhangJian He	Low
Product	pom	groupid	net.minidev	Highest
Product	pom	name	ASM based accessors helper used by json-smart	High
Product	pom	organization name	Chemouni Uriel	Low
Product	pom	organization url	https://urielch.github.io/	Low
Product	pom	url	https://urielch.github.io/	Medium
Version	file	version	2.5.1	High
Version	Manifest	Bundle-Version	2.5.1	High
Version	pom	version	2.5.1	Highest

Identifiers

pkg:maven/net.minidev/accessors-smart@2.5.1 (Confidence:High)

angus-activation-2.0.2.jar

Description:

 Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/org/eclipse/angus/angus-activation/2.0.2/angus-activation-2.0.2.jar
MD5: 42bba74155dc773eca277ee7a16f74be
SHA1: 41f1e0ddd157c856926ed149ab837d110955a9fc
SHA256:6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	angus-activation	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	angus	Highest
Vendor	jar	package name	eclipse	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	angus-activation	Medium
Vendor	Manifest	extension-name	org.eclipse.angus	Medium
Vendor	Manifest	implementation-build-id	2.0.2-RELEASE-c08e320	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider"	Low
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	angus-activation	Highest
Vendor	pom	artifactid	angus-activation	Low
Vendor	pom	groupid	org.eclipse.angus	Highest
Vendor	pom	name	Angus Activation Registries	High
Vendor	pom	parent-artifactid	angus-activation-project	Low
Product	file	name	angus-activation	High
Product	jar	package name	activation	Highest
Product	jar	package name	angus	Highest
Product	jar	package name	eclipse	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Angus Activation Registries	Medium
Product	Manifest	bundle-symbolicname	angus-activation	Medium
Product	Manifest	extension-name	org.eclipse.angus	Medium
Product	Manifest	implementation-build-id	2.0.2-RELEASE-c08e320	Low
Product	Manifest	Implementation-Title	Angus Activation Registries	High
Product	Manifest	provide-capability	osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MailcapRegistryProvider",osgi.serviceloader;osgi.serviceloader="jakarta.activation.spi.MimeTypeRegistryProvider"	Low
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	angus-activation	Highest
Product	pom	groupid	org.eclipse.angus	Highest
Product	pom	name	Angus Activation Registries	High
Product	pom	parent-artifactid	angus-activation-project	Medium
Version	file	version	2.0.2	High
Version	Manifest	Bundle-Version	2.0.2	High
Version	pom	version	2.0.2	Highest

Identifiers

pkg:maven/org.eclipse.angus/angus-activation@2.0.2 (Confidence:High)

asm-9.7.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/runner/.m2/repository/org/ow2/asm/asm/9.7/asm-9.7.jar
MD5: 3957b18bf02a62edcb6726d074b90b08
SHA1: 073d7b3086e14beb604ced229c302feff6449723
SHA256:adf46d5e34940bdf148ecdd26a9ee8eea94496a72034ff7141066b3eea5c4e9d
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.hazendaz/javabean-tester@2.8.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	jar	package name	asm	Highest
Vendor	jar	package name	objectweb	Highest
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	artifactid	asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	pom	developer email	ebruneton@free.fr	Low
Vendor	pom	developer email	eu@javatx.org	Low
Vendor	pom	developer email	forax@univ-mlv.fr	Low
Vendor	pom	developer id	ebruneton	Medium
Vendor	pom	developer id	eu	Medium
Vendor	pom	developer id	forax	Medium
Vendor	pom	developer name	Eric Bruneton	Medium
Vendor	pom	developer name	Eugene Kuleshov	Medium
Vendor	pom	developer name	Remi Forax	Medium
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	pom	name	asm	High
Vendor	pom	organization name	OW2	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	parent-artifactid	ow2	Low
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm	High
Product	jar	package name	asm	Highest
Product	jar	package name	objectweb	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	pom	artifactid	asm	Highest
Product	pom	developer email	ebruneton@free.fr	Low
Product	pom	developer email	eu@javatx.org	Low
Product	pom	developer email	forax@univ-mlv.fr	Low
Product	pom	developer id	ebruneton	Low
Product	pom	developer id	eu	Low
Product	pom	developer id	forax	Low
Product	pom	developer name	Eric Bruneton	Low
Product	pom	developer name	Eugene Kuleshov	Low
Product	pom	developer name	Remi Forax	Low
Product	pom	groupid	org.ow2.asm	Highest
Product	pom	name	asm	High
Product	pom	organization name	OW2	Low
Product	pom	organization url	http://www.ow2.org/	Low
Product	pom	parent-artifactid	ow2	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Version	file	version	9.7	High
Version	Manifest	Bundle-Version	9.7	High
Version	Manifest	Implementation-Version	9.7	High
Version	pom	parent-version	9.7	Low
Version	pom	version	9.7	Highest

Identifiers

pkg:maven/org.ow2.asm/asm@9.7 (Confidence:High)

error_prone_annotations-2.32.0.jar

Description:

Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.32.0/error_prone_annotations-2.32.0.jar
MD5: 2a996cc75e411174d563c6d59daa4c60
SHA1: e5b2f8b1dede30f5f5bb0baf44f466397ce6b4f7
SHA256:1f52fedb9ac8e0e6aaf312964f4b390312ea45f91a5657050f29780907b484ba
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Vendor	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	error_prone_annotations	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Product	file	name	error_prone_annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	bundle-docurl	https://errorprone.info/error_prone_annotations	Low
Product	Manifest	Bundle-Name	error-prone annotations	Medium
Product	Manifest	bundle-symbolicname	com.google.errorprone.annotations	Medium
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	groupid	com.google.errorprone	Highest
Product	pom	name	error-prone annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Version	file	version	2.32.0	High
Version	Manifest	Bundle-Version	2.32.0	High
Version	pom	version	2.32.0	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.32.0 (Confidence:High)

j2objc-annotations-3.0.0.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.0.0/j2objc-annotations-3.0.0.jar
MD5: f59529b29202a5baf37f491ea5ec8627
SHA1: 7399e65dd7e9ff3404f4535b2f017093bdb134c7
SHA256:88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	j2objc-annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	google	Highest
Vendor	jar	package name	j2objc	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	j2objc-annotations	Highest
Vendor	pom	artifactid	j2objc-annotations	Low
Vendor	pom	developer email	tball@google.com	Low
Vendor	pom	developer id	tomball	Medium
Vendor	pom	developer name	Tom Ball	Medium
Vendor	pom	developer org	Google	Medium
Vendor	pom	developer org URL	https://www.google.com	Medium
Vendor	pom	groupid	com.google.j2objc	Highest
Vendor	pom	name	J2ObjC Annotations	High
Vendor	pom	url	google/j2objc/	Highest
Product	file	name	j2objc-annotations	High
Product	jar	package name	annotations	Highest
Product	jar	package name	google	Highest
Product	jar	package name	j2objc	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	j2objc-annotations	Highest
Product	pom	developer email	tball@google.com	Low
Product	pom	developer id	tomball	Low
Product	pom	developer name	Tom Ball	Low
Product	pom	developer org	Google	Low
Product	pom	developer org URL	https://www.google.com	Low
Product	pom	groupid	com.google.j2objc	Highest
Product	pom	name	J2ObjC Annotations	High
Product	pom	url	google/j2objc/	High
Version	file	version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0 (Confidence:High)

jakarta.activation-api-2.1.3.jar

Description:

  Specification

License:

EDL 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/2.1.3/jakarta.activation-api-2.1.3.jar
MD5: 76e7b680375ea9f40f3ddbd702efcd25
SHA1: fa165bd70cda600368eee31555222776a46b881f
SHA256:01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.activation-api	High
Vendor	jar	package name	activation	Highest
Vendor	jar	package name	jakarta	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	Manifest	implementation-build-id	7f7d358	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	artifactid	jakarta.activation-api	Highest
Vendor	pom	artifactid	jakarta.activation-api	Low
Vendor	pom	developer email	bill.shannon@oracle.com	Low
Vendor	pom	developer id	shannon	Medium
Vendor	pom	developer name	Bill Shannon	Medium
Vendor	pom	developer org	Oracle	Medium
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	pom	name	Jakarta Activation API	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	url	jakartaee/jaf-api	Highest
Vendor	pom (hint)	developer org	sun	Medium
Product	file	name	jakarta.activation-api	High
Product	jar	package name	activation	Highest
Product	jar	package name	jakarta	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	Bundle-Name	Jakarta Activation API	Medium
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	Manifest	implementation-build-id	7f7d358	Low
Product	Manifest	Implementation-Title	Jakarta Activation API	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	pom	artifactid	jakarta.activation-api	Highest
Product	pom	developer email	bill.shannon@oracle.com	Low
Product	pom	developer id	shannon	Low
Product	pom	developer name	Bill Shannon	Low
Product	pom	developer org	Oracle	Low
Product	pom	groupid	jakarta.activation	Highest
Product	pom	name	Jakarta Activation API	High
Product	pom	parent-artifactid	project	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	url	jakartaee/jaf-api	High
Version	file	version	2.1.3	High
Version	Manifest	Bundle-Version	2.1.3	High
Version	pom	parent-version	2.1.3	Low
Version	pom	version	2.1.3	Highest

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3 (Confidence:High)

json-path-2.9.0.jar

Description:

A library to query and verify JSON

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/jayway/jsonpath/json-path/2.9.0/json-path-2.9.0.jar
MD5: e89678d2e4ff45e4f39a97ccd0223719
SHA1: 37fe2217f577b0b68b18e62c4d17a8858ecf9b69
SHA256:11a9ee6f88bb31f1450108d1cf6441377dec84aca075eb6bb2343be157575bea
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-path	High
Vendor	jar	package name	jayway	Highest
Vendor	jar	package name	json	Highest
Vendor	jar	package name	jsonpath	Highest
Vendor	jar	package name	path	Highest
Vendor	Manifest	automatic-module-name	json.path	Medium
Vendor	Manifest	bundle-symbolicname	json-path	Medium
Vendor	pom	artifactid	json-path	Highest
Vendor	pom	artifactid	json-path	Low
Vendor	pom	developer email	kalle.stenflo (a) gmail.com	Low
Vendor	pom	developer id	kalle.stenflo	Medium
Vendor	pom	developer name	Kalle Stenflo	Medium
Vendor	pom	groupid	com.jayway.jsonpath	Highest
Vendor	pom	name	json-path	High
Vendor	pom	url	jayway/JsonPath	Highest
Product	file	name	json-path	High
Product	jar	package name	jayway	Highest
Product	jar	package name	json	Highest
Product	jar	package name	jsonpath	Highest
Product	jar	package name	path	Highest
Product	Manifest	automatic-module-name	json.path	Medium
Product	Manifest	Bundle-Name	json-path	Medium
Product	Manifest	bundle-symbolicname	json-path	Medium
Product	Manifest	Implementation-Title	json-path	High
Product	pom	artifactid	json-path	Highest
Product	pom	developer email	kalle.stenflo (a) gmail.com	Low
Product	pom	developer id	kalle.stenflo	Low
Product	pom	developer name	Kalle Stenflo	Low
Product	pom	groupid	com.jayway.jsonpath	Highest
Product	pom	name	json-path	High
Product	pom	url	jayway/JsonPath	High
Version	file	version	2.9.0	High
Version	Manifest	Bundle-Version	2.9.0	High
Version	pom	version	2.9.0	Highest

Identifiers

pkg:maven/com.jayway.jsonpath/json-path@2.9.0 (Confidence:High)
cpe:2.3:a:json-path:jayway_jsonpath:2.9.0:*:*:*:*:*:*:* (Confidence:Highest)

json-smart-2.5.1.jar

Description:

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.5.1/json-smart-2.5.1.jar
MD5: 88a65001b616c2e7796f9263ad97bbf1
SHA1: 4c11d2808d009132dfbbf947ebf37de6bf266c8e
SHA256:86c0c189581b79b57b0719f443a724e9f628ffbb9eef645cf79194f5973a1001
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	json-smart	High
Vendor	jar	package name	json	Highest
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	net	Highest
Vendor	jar	package name	parser	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Vendor	pom	artifactid	json-smart	Highest
Vendor	pom	artifactid	json-smart	Low
Vendor	pom	developer email	adoneitan@gmail.com	Low
Vendor	pom	developer email	shoothzj@gmail.com	Low
Vendor	pom	developer email	uchemouni@gmail.com	Low
Vendor	pom	developer id	erav	Medium
Vendor	pom	developer id	shoothzj	Medium
Vendor	pom	developer id	uriel	Medium
Vendor	pom	developer name	Eitan Raviv	Medium
Vendor	pom	developer name	Uriel Chemouni	Medium
Vendor	pom	developer name	ZhangJian He	Medium
Vendor	pom	groupid	net.minidev	Highest
Vendor	pom	name	JSON Small and Fast Parser	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	pom	url	https://urielch.github.io/	Highest
Product	file	name	json-smart	High
Product	jar	package name	json	Highest
Product	jar	package name	minidev	Highest
Product	jar	package name	net	Highest
Product	jar	package name	parser	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	Manifest	Bundle-Name	json-smart	Medium
Product	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Product	pom	artifactid	json-smart	Highest
Product	pom	developer email	adoneitan@gmail.com	Low
Product	pom	developer email	shoothzj@gmail.com	Low
Product	pom	developer email	uchemouni@gmail.com	Low
Product	pom	developer id	erav	Low
Product	pom	developer id	shoothzj	Low
Product	pom	developer id	uriel	Low
Product	pom	developer name	Eitan Raviv	Low
Product	pom	developer name	Uriel Chemouni	Low
Product	pom	developer name	ZhangJian He	Low
Product	pom	groupid	net.minidev	Highest
Product	pom	name	JSON Small and Fast Parser	High
Product	pom	organization name	Chemouni Uriel	Low
Product	pom	organization url	https://urielch.github.io/	Low
Product	pom	url	https://urielch.github.io/	Medium
Version	file	version	2.5.1	High
Version	Manifest	Bundle-Version	2.5.1	High
Version	pom	version	2.5.1	Highest

Identifiers

pkg:maven/net.minidev/json-smart@2.5.1 (Confidence:High)
cpe:2.3:a:json-smart_project:json-smart:2.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:json-smart_project:json-smart-v2:2.5.1:*:*:*:*:*:*:* (Confidence:Low)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	file	name	jsr305	High
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	com.google.code.findbugs	Highest
Product	pom	name	FindBugs-jsr305	High
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	Manifest	Bundle-Version	3.0.2	High
Version	pom	version	3.0.2	Highest

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

micrometer-commons-1.12.10.jar

Description:

Module containing common code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/micrometer/micrometer-commons/1.12.10/micrometer-commons-1.12.10.jar
MD5: e9225dd403cf74fbfbb59075478fb806
SHA1: 93683cbdf6dbd7f4f9781a207aa350f4101725d9
SHA256:11649fac6fb1a525cd049d2c4fb61f85fb2aa4e5d5a89ef6d93a5ee30b6e44b3
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	micrometer-commons	High
Vendor	jar	package name	common	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	micrometer	Highest
Vendor	Manifest	automatic-module-name	micrometer.commons	Medium
Vendor	Manifest	branch	HEAD	Low
Vendor	Manifest	build-date	2024-09-09_18:33:11	Low
Vendor	Manifest	build-date-utc	2024-09-09T18:33:11.687157083Z	Low
Vendor	Manifest	build-host	cde889fc7a6d	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	Manifest	build-number	36660	Low
Vendor	Manifest	build-timezone	Etc/UTC	Low
Vendor	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/36660	Low
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	built-status	release	Low
Vendor	Manifest	bundle-symbolicname	micrometer-commons	Medium
Vendor	Manifest	change	2d6e8e7	Low
Vendor	Manifest	full-change	2d6e8e75fdf4a10e24a562d05717d556495a98e8	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	module-source	/micrometer-commons	Low
Vendor	pom	artifactid	micrometer-commons	Highest
Vendor	pom	artifactid	micrometer-commons	Low
Vendor	pom	developer email	tludwig@vmware.com	Low
Vendor	pom	developer id	shakuzen	Medium
Vendor	pom	developer name	Tommy Ludwig	Medium
Vendor	pom	groupid	io.micrometer	Highest
Vendor	pom	name	micrometer-commons	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Product	file	name	micrometer-commons	High
Product	jar	package name	common	Highest
Product	jar	package name	io	Highest
Product	jar	package name	micrometer	Highest
Product	Manifest	automatic-module-name	micrometer.commons	Medium
Product	Manifest	branch	HEAD	Low
Product	Manifest	build-date	2024-09-09_18:33:11	Low
Product	Manifest	build-date-utc	2024-09-09T18:33:11.687157083Z	Low
Product	Manifest	build-host	cde889fc7a6d	Low
Product	Manifest	build-job	deploy	Low
Product	Manifest	build-number	36660	Low
Product	Manifest	build-timezone	Etc/UTC	Low
Product	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/36660	Low
Product	Manifest	built-os	Linux	Low
Product	Manifest	built-status	release	Low
Product	Manifest	Bundle-Name	micrometer-commons	Medium
Product	Manifest	bundle-symbolicname	micrometer-commons	Medium
Product	Manifest	change	2d6e8e7	Low
Product	Manifest	full-change	2d6e8e75fdf4a10e24a562d05717d556495a98e8	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-commons;1.12.10	High
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	module-source	/micrometer-commons	Low
Product	pom	artifactid	micrometer-commons	Highest
Product	pom	developer email	tludwig@vmware.com	Low
Product	pom	developer id	shakuzen	Low
Product	pom	developer name	Tommy Ludwig	Low
Product	pom	groupid	io.micrometer	Highest
Product	pom	name	micrometer-commons	High
Product	pom	url	micrometer-metrics/micrometer	High
Version	file	version	1.12.10	High
Version	Manifest	Bundle-Version	1.12.10	High
Version	Manifest	Implementation-Version	1.12.10	High
Version	pom	version	1.12.10	Highest

Identifiers

pkg:maven/io.micrometer/micrometer-commons@1.12.10 (Confidence:High)

micrometer-observation-1.12.10.jar

Description:

Module containing Observation related code

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/runner/.m2/repository/io/micrometer/micrometer-observation/1.12.10/micrometer-observation-1.12.10.jar
MD5: 769876d02c1631216aca0da7676dbbdb
SHA1: 222685ec0561c90e300eac71093f51eb0d7e1a17
SHA256:332ffde8304f4dcba4b147de0d199350792c0eb4e13363ffee54c7ed1fe28a7b
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	micrometer-observation	High
Vendor	jar	package name	io	Highest
Vendor	jar	package name	micrometer	Highest
Vendor	jar	package name	observation	Highest
Vendor	Manifest	automatic-module-name	micrometer.observation	Medium
Vendor	Manifest	branch	HEAD	Low
Vendor	Manifest	build-date	2024-09-09_18:33:12	Low
Vendor	Manifest	build-date-utc	2024-09-09T18:33:12.071105218Z	Low
Vendor	Manifest	build-host	cde889fc7a6d	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	Manifest	build-number	36660	Low
Vendor	Manifest	build-timezone	Etc/UTC	Low
Vendor	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/36660	Low
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	built-status	release	Low
Vendor	Manifest	bundle-symbolicname	micrometer-observation	Medium
Vendor	Manifest	change	2d6e8e7	Low
Vendor	Manifest	full-change	2d6e8e75fdf4a10e24a562d05717d556495a98e8	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	module-source	/micrometer-observation	Low
Vendor	pom	artifactid	micrometer-observation	Highest
Vendor	pom	artifactid	micrometer-observation	Low
Vendor	pom	developer email	tludwig@vmware.com	Low
Vendor	pom	developer id	shakuzen	Medium
Vendor	pom	developer name	Tommy Ludwig	Medium
Vendor	pom	groupid	io.micrometer	Highest
Vendor	pom	name	micrometer-observation	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Product	file	name	micrometer-observation	High
Product	jar	package name	io	Highest
Product	jar	package name	micrometer	Highest
Product	jar	package name	observation	Highest
Product	Manifest	automatic-module-name	micrometer.observation	Medium
Product	Manifest	branch	HEAD	Low
Product	Manifest	build-date	2024-09-09_18:33:12	Low
Product	Manifest	build-date-utc	2024-09-09T18:33:12.071105218Z	Low
Product	Manifest	build-host	cde889fc7a6d	Low
Product	Manifest	build-job	deploy	Low
Product	Manifest	build-number	36660	Low
Product	Manifest	build-timezone	Etc/UTC	Low
Product	Manifest	build-url	https://circleci.com/gh/micrometer-metrics/micrometer/36660	Low
Product	Manifest	built-os	Linux	Low
Product	Manifest	built-status	release	Low
Product	Manifest	Bundle-Name	micrometer-observation	Medium
Product	Manifest	bundle-symbolicname	micrometer-observation	Medium
Product	Manifest	change	2d6e8e7	Low
Product	Manifest	full-change	2d6e8e75fdf4a10e24a562d05717d556495a98e8	Low
Product	Manifest	Implementation-Title	io.micrometer#micrometer-observation;1.12.10	High
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	module-source	/micrometer-observation	Low
Product	pom	artifactid	micrometer-observation	Highest
Product	pom	developer email	tludwig@vmware.com	Low
Product	pom	developer id	shakuzen	Low
Product	pom	developer name	Tommy Ludwig	Low
Product	pom	groupid	io.micrometer	Highest
Product	pom	name	micrometer-observation	High
Product	pom	url	micrometer-metrics/micrometer	High
Version	file	version	1.12.10	High
Version	Manifest	Bundle-Version	1.12.10	High
Version	Manifest	Implementation-Version	1.12.10	High
Version	pom	version	1.12.10	Highest

Identifiers

pkg:maven/io.micrometer/micrometer-observation@1.12.10 (Confidence:High)

slf4j-api-2.0.16.jar

Description:

The slf4j API

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.16/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	slf4j-api	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	build-jdk-spec	21	Low
Vendor	Manifest	bundle-docurl	http://www.slf4j.org	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	slf4j-api	Highest
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Product	file	name	slf4j-api	High
Product	jar	package name	slf4j	Highest
Product	Manifest	build-jdk-spec	21	Low
Product	Manifest	bundle-docurl	http://www.slf4j.org	Low
Product	Manifest	Bundle-Name	SLF4J API Module	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	Manifest	Implementation-Title	slf4j-api	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	org.slf4j	Highest
Product	pom	name	SLF4J API Module	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	file	version	2.0.16	High
Version	Manifest	Bundle-Version	2.0.16	High
Version	Manifest	Implementation-Version	2.0.16	High
Version	pom	version	2.0.16	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@2.0.16 (Confidence:High)

spotbugs-annotations-4.8.6.jar

Description:

Annotations the SpotBugs tool supports

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html

File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.8.6/spotbugs-annotations-4.8.6.jar
MD5: 0806b237c67c69869506ce3ced9a722f
SHA1: 1dcffed3e561ed32134a0dff4717f19bc2fdf4d8
SHA256:4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65
Referenced In Project/Scope: psi-probe-rest:provided
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spotbugs-annotations	High
Vendor	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Vendor	pom	artifactid	spotbugs-annotations	Highest
Vendor	pom	artifactid	spotbugs-annotations	Low
Vendor	pom	developer email	andreas.sewe@codetrails.com	Low
Vendor	pom	developer email	dbrosius@mebigfatguy.com	Low
Vendor	pom	developer email	loskutov@gmx.de	Low
Vendor	pom	developer email	skypencil@gmail.com	Low
Vendor	pom	developer id	henrik242	Medium
Vendor	pom	developer id	iloveeclipse	Medium
Vendor	pom	developer id	jsotuyod	Medium
Vendor	pom	developer id	KengoTODA	Medium
Vendor	pom	developer id	mebigfatguy	Medium
Vendor	pom	developer id	sewe	Medium
Vendor	pom	developer id	ThrawnCA	Medium
Vendor	pom	developer name	Andreas Sewe	Medium
Vendor	pom	developer name	Andrey Loskutov	Medium
Vendor	pom	developer name	Dave Brosius	Medium
Vendor	pom	developer name	Juan Martín Sotuyo Dodero	Medium
Vendor	pom	developer name	Kengo TODA	Medium
Vendor	pom	groupid	com.github.spotbugs	Highest
Vendor	pom	name	SpotBugs Annotations	High
Vendor	pom	url	https://spotbugs.github.io/	Highest
Product	file	name	spotbugs-annotations	High
Product	Manifest	automatic-module-name	com.github.spotbugs.annotations	Medium
Product	Manifest	Bundle-Name	spotbugs-annotations	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	spotbugs-annotations	Medium
Product	pom	artifactid	spotbugs-annotations	Highest
Product	pom	developer email	andreas.sewe@codetrails.com	Low
Product	pom	developer email	dbrosius@mebigfatguy.com	Low
Product	pom	developer email	loskutov@gmx.de	Low
Product	pom	developer email	skypencil@gmail.com	Low
Product	pom	developer id	henrik242	Low
Product	pom	developer id	iloveeclipse	Low
Product	pom	developer id	jsotuyod	Low
Product	pom	developer id	KengoTODA	Low
Product	pom	developer id	mebigfatguy	Low
Product	pom	developer id	sewe	Low
Product	pom	developer id	ThrawnCA	Low
Product	pom	developer name	Andreas Sewe	Low
Product	pom	developer name	Andrey Loskutov	Low
Product	pom	developer name	Dave Brosius	Low
Product	pom	developer name	Juan Martín Sotuyo Dodero	Low
Product	pom	developer name	Kengo TODA	Low
Product	pom	groupid	com.github.spotbugs	Highest
Product	pom	name	SpotBugs Annotations	High
Product	pom	url	https://spotbugs.github.io/	Medium
Version	file	version	4.8.6	High
Version	Manifest	Bundle-Version	4.8.6	High
Version	pom	version	4.8.6	Highest

Identifiers

pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6 (Confidence:High)

spring-core-6.1.13.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/spring-core/6.1.13/spring-core-6.1.13.jar
MD5: e1965e1d05b8ed52cee0593007d2e40f
SHA1: ddbd765408d2665f47017c8f05a7682012f91da3
SHA256:5f0059701b1c0bcdab78bb72dc252fce9eab16147819587238cacbdbf7b794cf
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	io	Highest
Vendor	jar	package name	org	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	Manifest	multi-release	true	Low
Vendor	pom	artifactid	spring-core	Highest
Vendor	pom	artifactid	spring-core	Low
Vendor	pom	developer email	juergen.hoeller@broadcom.com	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Core	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-core	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	core	Highest
Product	jar	package name	io	Highest
Product	jar	package name	org	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.core	Medium
Product	Manifest	Implementation-Title	spring-core	High
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	spring-core	Highest
Product	pom	developer email	juergen.hoeller@broadcom.com	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Core	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	6.1.13	High
Version	Manifest	Implementation-Version	6.1.13	High
Version	pom	version	6.1.13	Highest

Related Dependencies

Identifiers

pkg:maven/org.springframework/spring-core@6.1.13 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)

spring-hateoas-2.3.3.jar

Description:

		Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/hateoas/spring-hateoas/2.3.3/spring-hateoas-2.3.3.jar
MD5: 0e5f69f6fc7bf034a58d57193d7a1c11
SHA1: 57998c7e68ac0884ff3c263fb09903b0c211d523
SHA256:66cbb859b210502b5ecb0e2951e234eac432fdec3d01feff6dcefb4d19af923a
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/com.github.psi-probe/psi-probe-rest@5.1.1-SNAPSHOT

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-hateoas	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	hateoas	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	support	Highest
Vendor	Manifest	automatic-module-name	spring.hateoas	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	pom	artifactid	spring-hateoas	Highest
Vendor	pom	artifactid	spring-hateoas	Low
Vendor	pom	developer email	gturnquist(at)vmware.com	Low
Vendor	pom	developer email	odrotbohm(at)vmware.com	Low
Vendor	pom	developer id	gturnquist	Medium
Vendor	pom	developer id	odrotbohm	Medium
Vendor	pom	developer name	Greg Turnquist	Medium
Vendor	pom	developer name	Oliver Drotbohm	Medium
Vendor	pom	developer org	VMware, Inc.	Medium
Vendor	pom	groupid	org.springframework.hateoas	Highest
Vendor	pom	name	Spring HATEOAS	High
Vendor	pom	organization name	Pivotal, Inc.	High
Vendor	pom	organization url	https://www.spring.io	Medium
Vendor	pom	url	spring-projects/spring-hateoas	Highest
Product	file	name	spring-hateoas	High
Product	jar	package name	hateoas	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	support	Highest
Product	Manifest	automatic-module-name	spring.hateoas	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Spring HATEOAS	High
Product	pom	artifactid	spring-hateoas	Highest
Product	pom	developer email	gturnquist(at)vmware.com	Low
Product	pom	developer email	odrotbohm(at)vmware.com	Low
Product	pom	developer id	gturnquist	Low
Product	pom	developer id	odrotbohm	Low
Product	pom	developer name	Greg Turnquist	Low
Product	pom	developer name	Oliver Drotbohm	Low
Product	pom	developer org	VMware, Inc.	Low
Product	pom	groupid	org.springframework.hateoas	Highest
Product	pom	name	Spring HATEOAS	High
Product	pom	organization name	Pivotal, Inc.	Low
Product	pom	organization url	https://www.spring.io	Low
Product	pom	url	spring-projects/spring-hateoas	High
Version	file	version	2.3.3	High
Version	Manifest	Implementation-Version	2.3.3	High
Version	pom	version	2.3.3	Highest

Identifiers

pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3 (Confidence:High)
cpe:2.3:a:vmware:spring_hateoas:2.3.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-plugin-core-3.0.0.jar

Description:

Core plugin infrastructure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/plugin/spring-plugin-core/3.0.0/spring-plugin-core-3.0.0.jar
MD5: d29a8f831dfe90d150ab694489f2e7c2
SHA1: d56aa02dd7272dca30aa598dc8b72e823227046a
SHA256:edf72d44b9cf1199cc783d620f5f86df82fb378521dac313540086e6c3c66ff0
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-plugin-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	jar	package name	plugin	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.plugin.core	Medium
Vendor	Manifest	build-jdk-spec	17	Low
Vendor	pom	artifactid	spring-plugin-core	Highest
Vendor	pom	artifactid	spring-plugin-core	Low
Vendor	pom	developer email	odrotbohm@vmware.com	Low
Vendor	pom	developer id	drotbohm	Medium
Vendor	pom	developer name	Oliver Drotbohm	Medium
Vendor	pom	developer org	VMware	Medium
Vendor	pom	developer org URL	https://www.spring.io	Medium
Vendor	pom	groupid	org.springframework.plugin	Highest
Vendor	pom	name	Spring Plugin - Core	High
Vendor	pom	organization name	VMware, Inc.	High
Vendor	pom	organization url	https://www.vmware.com	Medium
Vendor	pom	url	spring-projects/spring-plugin/spring-plugin-core	Highest
Product	file	name	spring-plugin-core	High
Product	jar	package name	core	Highest
Product	jar	package name	plugin	Highest
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.plugin.core	Medium
Product	Manifest	build-jdk-spec	17	Low
Product	Manifest	Implementation-Title	Spring Plugin - Core	High
Product	pom	artifactid	spring-plugin-core	Highest
Product	pom	developer email	odrotbohm@vmware.com	Low
Product	pom	developer id	drotbohm	Low
Product	pom	developer name	Oliver Drotbohm	Low
Product	pom	developer org	VMware	Low
Product	pom	developer org URL	https://www.spring.io	Low
Product	pom	groupid	org.springframework.plugin	Highest
Product	pom	name	Spring Plugin - Core	High
Product	pom	organization name	VMware, Inc.	Low
Product	pom	organization url	https://www.vmware.com	Low
Product	pom	url	spring-projects/spring-plugin/spring-plugin-core	High
Version	file	version	3.0.0	High
Version	Manifest	Implementation-Version	3.0.0	High
Version	pom	version	3.0.0	Highest

Identifiers

pkg:maven/org.springframework.plugin/spring-plugin-core@3.0.0 (Confidence:High)

spring-web-6.1.13.jar

Description:

Spring Web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/runner/.m2/repository/org/springframework/spring-web/6.1.13/spring-web-6.1.13.jar
MD5: 04c3636cb8b2f312a1343a601a5b2043
SHA1: e4028dbbc4ae1fb4bfd3257c53302956d7687b66
SHA256:8ebf053db3d81756d92797060b5c4edc80a9b39262266ce16cd084448fa13c90
Referenced In Project/Scope: psi-probe-rest:compile
pkg:maven/org.springframework.hateoas/spring-hateoas@2.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-web	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	web	Highest
Vendor	Manifest	automatic-module-name	spring.web	Medium
Vendor	pom	artifactid	spring-web	Highest
Vendor	pom	artifactid	spring-web	Low
Vendor	pom	developer email	juergen.hoeller@broadcom.com	Low
Vendor	pom	developer id	jhoeller	Medium
Vendor	pom	developer name	Juergen Hoeller	Medium
Vendor	pom	groupid	org.springframework	Highest
Vendor	pom	name	Spring Web	High
Vendor	pom	organization name	Spring IO	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	url	spring-projects/spring-framework	Highest
Product	file	name	spring-web	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	web	Highest
Product	Manifest	automatic-module-name	spring.web	Medium
Product	Manifest	Implementation-Title	spring-web	High
Product	pom	artifactid	spring-web	Highest
Product	pom	developer email	juergen.hoeller@broadcom.com	Low
Product	pom	developer id	jhoeller	Low
Product	pom	developer name	Juergen Hoeller	Low
Product	pom	groupid	org.springframework	Highest
Product	pom	name	Spring Web	High
Product	pom	organization name	Spring IO	Low
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	url	spring-projects/spring-framework	High
Version	file	version	6.1.13	High
Version	Manifest	Implementation-Version	6.1.13	High
Version	pom	version	6.1.13	Highest

Identifiers

pkg:maven/org.springframework/spring-web@6.1.13 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:web_project:web:6.1.13:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: psi-probe-rest

com.github.psi-probe:psi-probe-rest:5.1.1-SNAPSHOT

Summary

Dependencies (vulnerable)

accessors-smart-2.5.1.jar

Evidence

Identifiers

angus-activation-2.0.2.jar

Evidence

Identifiers

asm-9.7.jar

Evidence

Identifiers

error_prone_annotations-2.32.0.jar

Evidence

Identifiers

j2objc-annotations-3.0.0.jar

Evidence

Identifiers

jakarta.activation-api-2.1.3.jar

Evidence

Identifiers

json-path-2.9.0.jar

Evidence

Identifiers

json-smart-2.5.1.jar

Evidence

Identifiers

jsr305-3.0.2.jar

Evidence

Identifiers

micrometer-commons-1.12.10.jar

Evidence

Identifiers

micrometer-observation-1.12.10.jar

Evidence

Identifiers

slf4j-api-2.0.16.jar

Evidence

Identifiers

spotbugs-annotations-4.8.6.jar

Evidence

Identifiers

spring-core-6.1.13.jar

Evidence

Related Dependencies

Identifiers

spring-hateoas-2.3.3.jar

Evidence

Identifiers

spring-plugin-core-3.0.0.jar

Evidence

Identifiers

spring-web-6.1.13.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor